Fortinet Fortinet Certifications NSE4-5.4 Questions & Answers

• Question 201:

  Each UTM feature has configurable UTM objects such as sensors, profiles or lists that define how the feature will function. How are UTM features applied to traffic?

  A. One or more UTM features are enabled in a firewall policy.

  B. In the system configuration for that UTM feature, you can identify the policies to which the feature is to be applied.

  C. Enable the appropriate UTM objects and identify one of them as the default.

  D. For each UTM object, identify which policy will use it.

  Correct Answer: A

• Question 202:

  If no firewall policy is specified between two FortiGate interfaces and zones are not used, which of the following statements describes the action taken on traffic flowing between these interfaces?

  A. The traffic is blocked.

  B. The traffic is passed.

  C. The traffic is passed and logged.

  D. The traffic is blocked and logged.

  Correct Answer: A

• Question 203:

  Which of the following statements describes the method of creating a policy to block access to an FTP site?

  A. Enable Web Filter URL blocking and add the URL of the FTP site to the URL Block list.

  B. Create a firewall policy with destination address set to the IP address of the FTP site, the Service set to FTP, and the Action set to Deny.

  C. Create a firewall policy with a protection profile containing the Block FTP option enabled.

  D. None of the above.

  Correct Answer: B

• Question 204:

  UTM features can be applied to which of the following items?

  A. Firewall policies

  B. User groups

  C. Policy routes

  D. Address groups

  Correct Answer: A

• Question 205:

  Which of the following Regular Expression patterns will make the term "bad language" case insensitive?

  A. [bad language]

  B. /bad language/i

  C. i/bad language/

  D. "bad language"

  E. /bad language/c

  Correct Answer: B

• Question 206:

  SSL content inspection is enabled on the FortiGate unit. Which of the following steps is required to prevent a user from being presented with a web browser warning when accessing an SSL- encrypted website?

  A. The root certificate of the FortiGate SSL proxy must be imported into the local certificate store on the user's workstation.

  B. Disable the strict server certificate check in the web browser under Internet Options.

  C. Enable transparent proxy mode on the FortiGate unit.

  D. Enable NTLM authentication on the FortiGate unit. NTLM authentication suppresses the certificate warning messages in the web browser.

  Correct Answer: A

• Question 207:

  Which of the following statements is correct regarding URL Filtering on the FortiGate unit?

  A. The FortiGate unit can filter URLs based on patterns using text and regular expressions.

  B. The available actions for URL Filtering are Allow and Block.

  C. Multiple URL Filter lists can be added to a single Web filter profile.

  D. A FortiGuard Web Filtering Override match will override a block action in the URL filter list.

  Correct Answer: A

• Question 208:

  In NAT/Route mode when there is no matching firewall policy for traffic to be forwarded by the Firewall, which of the following statements describes the action taken on traffic?

  A. The traffic is blocked.

  B. The traffic is passed.

  C. The traffic is passed and logged.

  D. The traffic is blocked and logged.

  Correct Answer: A

• Question 209:

  Which of the following statements is correct regarding URL Filtering on the FortiGate unit?

  A. The available actions for URL Filtering are Allow and Block.

  B. Multiple URL Filter lists can be added to a single Web filter profile.

  C. A FortiGuard Web Filtering Override match will override a block action in the URL filter list.

  D. The available actions for URL Filtering are Allow, Block and Exempt.

  Correct Answer: D

• Question 210:

  Which of the following statements regarding Banned Words are correct? (Select all that apply.)

  A. The FortiGate unit can scan web pages and email messages for instances of banned words.

  B. When creating a banned word list, an administrator can indicate either specific words or patterns.

  C. Banned words can be expressed as wildcards or regular expressions.

  D. Content is automatically blocked if a single instance of a banned word appears.

  E. The FortiGate unit includes a pre-defined library of common banned words.

  Correct Answer: ABC